Becoming a Cybersecurity Practitioner

If you had asked me years ago what I’d be doing today, running penetration tests and taking over corporate networks wouldn’t have been my answer. In fact, I studied theater in college. Yes, really. I’ve always loved storytelling, but life has a funny way of shifting your focus. Today, I’m a Principal Security Engineer, and becoming a cybersecurity practitioner wasn’t your typical path. But that’s precisely what makes this industry so interesting. There isn’t just one path to success.

So, if you’re considering cybersecurity but don’t come from a traditional tech background, let me walk you through how I got here. Consider this your A-Z guide to breaking into the field, and yes, you can do it too, no matter where you’re starting from.

1. Start with the Basics: Learn How to Use a Raspberry Pi

The journey of a thousand miles starts with one step!

Before you dive headfirst into certification after certification, I suggest getting hands-on with a Raspberry Pi. These tiny, affordable computers are perfect for learning Linux, coding (Python and C++), and even building small projects. You can buy the board by itself or get a kit with everything you need to get started.

You can learn more about the Raspberry Pi here. I recommend getting the Raspberry Pi 4 Starter Kit from CanaKit to have everything you need.

You’ll have a playground to practice and experiment with a Raspberry Pi. Look up tutorials or search for fun projects to explore. Trust me, it’s a great way to build foundational skills.

2. Get Certified: A+, Network+, and Security+

Certifications can give you credibility when you’re just getting started, and they don’t have to break the bank. Start with CompTIA A+, Network+, and Security+. These will help you grasp general IT, networking, and basic cybersecurity concepts.

I relied on free study materials, and Professor Messer’s YouTube channel was my go-to for exam prep. Here are the links to his playlists:

• Professor Messer’s CompTIA A+ Study Playlist (Test 1)
• Professor Messer’s CompTIA A+ Study Playlist (Test 2)
• Professor Messer’s CompTIA Network+ Study Playlist
• Professor Messer’s CompTIA Security+ Study Playlist

If you want to speed things up, boot camps can help. I used CED Solutions for a boot camp that covered A+, Network+, and Security+. The key here? STUDY HARD and GET CERTIFIED. These certifications were the stepping stones that opened doors for me.

3. Land an Entry-Level Job in Cybersecurity

Once you’ve earned your certifications, it’s time to start looking for a job. I was lucky enough to have a friend refer me for a tech support role at Rapid7, which was my foot in the door. But you don’t need connections to get started.

Get your LinkedIn profile in shape, update it with your certifications and skills, and make it known that you’re job hunting. Start applying to entry-level roles at top cybersecurity firms or their competitors. Don’t just focus on big names, either. There are smaller companies that offer excellent growth opportunities.

Set up job alerts on sites like Indeed and Glassdoor, and don’t be discouraged if you don’t get offers right away. The interviews will come. Stick with it.

4. Choose Your Path: For Me, It Was Penetration Testing

When I started at Rapid7, I knew I eventually wanted to become a penetration tester (aka ethical hacker). Penetration testing is one of the most challenging and rewarding fields in cybersecurity. But to get there, becoming a cybersecurity practitioner via Rapid7’s technical support. From this position, I was now on the inside and used my newfound resources at work, invested in training, and made the most of every opportunity to network with people on the pentesting team.

If pentesting is your goal, check out free resources like HackTheBox, VulnHub, and Metasploit Unleashed. Other great resources include TryHackMe, and YouTube channels like IppSec and Hak5. I personally dove deep into these resources to build my skills.

5. Get the Right Cert: Offensive Security Certified Professional (OSCP)

To cement myself as a professional in this field, I knew I had to pass the OSCP. Let me be honest: it’s tough. It took me four tries and two years to finally pass, but once I did, it was a game changer. The OSCP is one of the most respected certifications in the industry, and having it allowed me to demand the salary I have today. People have their opinions about certifications and OSCP, but achieving this goal helped solidify my becoming a cybersecurity practitioner.

If you’re interested in pursuing the OSCP, you can find pricing and information here. There are other certs out there too, like SANS GPEN or eLearnSecurity’s eJPT, which are great options depending on your goals and budget.

6. Never Stop Learning

Cybersecurity is always evolving, and if you aren’t constantly learning, you’ll fall behind. Whether it’s staying updated on new attack vectors, tools, or techniques, curiosity is your greatest asset in this field.

And here’s a tip: find a mentor. Having someone who’s been through the process can be invaluable. They’ll guide you, answer your questions, and help you avoid unnecessary pitfalls.

Final Takeaway: A Traditional Tech Degree is NOT required!

I journeyed to becoming a cybersecurity practitioner with a theatre degree. If that doesn’t convince you that it’s possible, I don’t know what will. Yes, it takes time and dedication, but the opportunities in cybersecurity are tremendous. If you’re willing to put in the work, you can make this happen.

---

This blog is about showing you that there’s no one-size-fits-all path to cybersecurity success. My journey was far from conventional, but that’s the beauty of it. Whether you’re starting with a tech degree, a different background like mine, or just raw curiosity, there’s a place for you here.

So if you’re ready to start walking your path, I’m here to help guide the way. At 6 Paths Cyber Security, we’ve been through the challenges, and now we’re dedicated to helping businesses and individuals strengthen their security posture. Reach out to learn more about how we can work together or if you need advice on becoming a cybersecurity practitioner. This road isn’t easy, but trust me, it’s worth it.

Check out our diverse penetration testing service offerings:

Penetration Testing Services

Also, subscribe to our youtube channel that will host a wide array of cybersecurity content:

6 Paths Cyber Security Youtube Channel